SOC Engineer
+6 months +
+On site in Hemel Hempstead
+DV cleared role – must hold current active clearance
+£600 – 700 a day
+Inside IR35
Join our team as a SOC Engineer and become a critical player in safeguarding organizations through cutting-edge security monitoring and threat detection. In this role, you will lead the design, implementation, and optimization of advanced security tools within a dynamic Security Operations Centre, ensuring our clients’ infrastructure remains resilient against emerging cyber threats. This is an exciting opportunity for an experienced cybersecurity professional to shape security strategies, work with innovative technologies, and make a tangible impact in the field of digital protection.
Required Skills:
- Proven experience leading security engineering teams and managing large client engagements
- Expertise in SIEM platforms, specifically Splunk Enterprise & Enterprise Security and Elastic Stack / Elastic Security
- Deep knowledge of detection engineering, threat intelligence frameworks (MITRE ATT&CK), and noise reduction techniques
- Hands-on experience with data ingestion tools such as Elastic Agent, Beats, Splunk UF/HF, Syslog, Kafka
- Advanced proficiency in querying languages including SPL, KQL, and EQL
- Strong understanding of ECS and CIM log normalization, enrichment, and large-scale data architectures
- Expertise in detection rule design, tuning, and lifecycle management
- Proficiency with automation and orchestration tools, CI/CD pipelines, and Infrastructure as Code (Terraform, Ansible)
- Excellent stakeholder communication and client management skills
- Ability to assess risks, evaluate complex information, and communicate effectively at all levels
Nice to Have Skills:
- Experience with cloud hosting environments and transition to Elastic Cloud or similar platforms
- Familiarity with Security Orchestration, Automation, and Response (SOAR) tools
- Knowledge of long-term threat detection strategies and experience with RBA frameworks
- Experience in capacity planning, high availability, and disaster recovery architectures
Ready to take your cybersecurity expertise to the next level? Apply now and become a vital part of our mission to defend digital assets with innovative security solutions!
…